Multiple sites sharing same users but not same permissions

I have one site I don’t want the users to have permission to change anything on because that’s my job. There’s another site I want the users to be able to edit.

First, is there an easy way to share users?

Secondly, can they have different permissions, which I guess means they can’t share the same user table?

Thanks